$ rpki-client -vvf rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft File: ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft (raw, json) Hash identifier: h7w/zwp8FBsCnEuuJTLD5aj+kl8thtBCLtdYtzfcDDQ= Subject key identifier: C5:57:EE:52:AF:8C:DE:73:06:3C:72:49:EE:A6:66:57:4F:E8:BE:1C Authority key identifier: CA:62:E4:38:F9:8D:85:18:D2:F2:A5:D9:F6:76:56:51:E5:AD:A6:0E Certificate issuer: /CN=A9168BA2/serialNumber=CA62E438F98D8518D2F2A5D9F6765651E5ADA60E Certificate serial: 0B7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft Manifest number: 0B5A Signing time: Sun 01 Mar 2026 23:40:17 +0000 Manifest this update: Sun 01 Mar 2026 23:40:16 +0000 Manifest next update: Sun 08 Mar 2026 23:40:16 +0000 Files and hashes: 1: ymLkOPmNhRjS8qXZ9nZWUeWtpg4.crl (hash: MvPGxw5S8eEqACmukOA2OI6fZ34qDfbC+h1G+nlzi4o=) 2: A2AF0622853711EFA09C892EC4F9AE02.roa (hash: OLS2n2bCipeK2cJAKKmNcGHacmpb1F1CGfou3xcKoRw=) 3: BA7B024C04D811EDBE98F982C4F9AE02.roa (hash: Qrs9ea1Ryt4mplsCkDhjHp70Ezhx/br174uLvjICktg=) 4: EF29C95E69C311EF82BCE77AC4F9AE02.roa (hash: wATgHFFEBhvghT6gMqTJTC0PonsBt+Ml1sqdhxwQAPg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.crl rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:40:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2939 (0xb7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168BA2, serialNumber=CA62E438F98D8518D2F2A5D9F6765651E5ADA60E Validity Not Before: Mar 1 23:40:16 2026 GMT Not After : Mar 8 23:40:16 2026 GMT Subject: CN=69a4ce61-5faa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:1e:26:6b:ea:e3:5c:d8:fe:36:88:cc:e3:67: e6:38:25:b0:2b:dc:dd:ea:df:cc:49:21:7f:52:f2: e8:51:6d:c2:df:12:d8:11:84:f2:12:7b:6c:68:6d: 9f:01:47:82:14:5e:13:85:9b:0d:07:f3:21:bc:ba: 6b:dc:0a:db:31:23:26:a3:2d:f9:7c:07:0d:d5:89: be:fd:cd:0e:68:a8:07:76:41:89:fa:d9:f7:52:79: 8f:c5:51:41:44:05:da:25:9d:91:20:7c:c5:5c:f4: a2:33:d6:54:db:24:52:65:20:ad:a6:01:8a:ed:1c: a7:6a:5d:70:bf:b3:ad:bf:81:c5:18:bd:31:8b:9e: ea:23:1f:6e:bd:39:04:9a:2f:4c:4c:de:2d:84:73: 22:fb:8a:85:0a:db:83:5f:c5:cb:19:ae:0d:67:e7: 62:9c:48:30:12:a5:a6:72:03:a4:80:60:55:90:1a: fd:97:9c:7c:dc:44:00:fd:a1:08:6b:fd:f5:bb:76: 86:b0:4c:b6:1a:d3:a2:d4:df:b1:b4:03:f5:77:47: 01:35:d3:76:f5:6d:30:38:e1:91:aa:ef:56:c0:72: 3a:c5:a4:c2:ec:92:95:d8:51:69:75:2f:56:dc:93: c9:bb:3d:95:05:b9:0f:8f:0d:cd:34:e5:cc:b4:d8: 9d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:57:EE:52:AF:8C:DE:73:06:3C:72:49:EE:A6:66:57:4F:E8:BE:1C X509v3 Authority Key Identifier: keyid:CA:62:E4:38:F9:8D:85:18:D2:F2:A5:D9:F6:76:56:51:E5:AD:A6:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:c8:de:17:3e:55:42:b3:05:19:7b:c3:d6:db:83:e3:57:08: 5b:37:b5:fe:af:d9:2f:a2:86:3c:9e:a6:b4:d5:95:33:6f:91: 7d:ab:47:af:2e:fa:5e:93:fb:a8:76:4d:78:4b:6e:37:e5:b2: 77:93:13:b5:3c:62:fa:5c:7c:2b:41:71:74:5f:da:c5:1f:66: 88:cf:f4:47:42:0c:0c:a0:8e:89:e0:76:ca:e2:90:c0:59:f5: 29:9d:07:d1:e4:65:d5:02:20:e2:8f:f6:81:ee:f5:e3:d7:ee: ed:a2:3a:03:27:9e:fc:bf:dd:f9:77:3b:55:ed:4a:ca:e7:9c: ae:69:37:d5:b1:ff:86:f7:fe:e8:0f:0f:0d:12:42:0f:f7:3e: d5:ec:89:7c:ac:a9:8f:fe:da:d8:29:4a:76:fb:8f:80:e3:fe: 18:7a:0f:f6:87:ae:04:3d:93:19:fd:4f:c6:4c:6c:b2:34:63: ed:e3:45:d7:d0:27:c8:e8:32:c0:fd:3e:28:ff:86:d1:e2:f7: 03:35:ad:bf:11:43:f7:fb:8c:5a:bf:c5:9f:18:49:d8:7e:02: ba:6c:ba:46:6f:4c:92:c1:d3:61:c4:e6:b4:6e:90:92:21:fa: 1b:12:91:88:fe:ff:a4:e9:29:1a:f2:2a:e3:d7:36:25:4a:d4: ec:5f:d8:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhCQTIxMTAvBgNVBAUTKENBNjJFNDM4Rjk4RDg1MThEMkYyQTVEOUY2NzY1NjUx RTVBREE2MEUwHhcNMjYwMzAxMjM0MDE2WhcNMjYwMzA4MjM0MDE2WjAYMRYwFAYD VQQDEw02OWE0Y2U2MS01ZmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8R4ma+rjXNj+NojM42fmOCWwK9zd6t/MSSF/UvLoUW3C3xLYEYTyEntsaG2f AUeCFF4ThZsNB/MhvLpr3ArbMSMmoy35fAcN1Ym+/c0OaKgHdkGJ+tn3UnmPxVFB RAXaJZ2RIHzFXPSiM9ZU2yRSZSCtpgGK7Rynal1wv7Otv4HFGL0xi57qIx9uvTkE mi9MTN4thHMi+4qFCtuDX8XLGa4NZ+dinEgwEqWmcgOkgGBVkBr9l5x83EQA/aEI a/31u3aGsEy2GtOi1N+xtAP1d0cBNdN29W0wOOGRqu9WwHI6xaTC7JKV2FFpdS9W 3JPJuz2VBbkPjw3NNOXMtNidjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMVX7lKv jN5zBjxySe6mZldP6L4cMB8GA1UdIwQYMBaAFMpi5Dj5jYUY0vKl2fZ2VlHlraYO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEJBMi85OURGMzg2MjU0 QzQxMUVBODRGNEU3MkRDNEY5QUUwMi95bUxrT1BtTmhSalM4cVhaOW5aV1VlV3Rw ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ltTGtPUG1OaFJqUzhxWFo5blpXVWVXdHBnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEJBMi85OURGMzg2MjU0QzQxMUVBODRGNEU3MkRDNEY5QUUwMi95bUxrT1BtTmhS alM4cVhaOW5aV1VlV3RwZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL8jeFz5VQrMFGXvD1tuD41cIWze1/q/ZL6KGPJ6mtNWVM2+RfatHry76XpP7 qHZNeEtuN+Wyd5MTtTxi+lx8K0FxdF/axR9miM/0R0IMDKCOieB2yuKQwFn1KZ0H 0eRl1QIg4o/2ge7149fu7aI6Ayee/L/d+Xc7Ve1Kyuecrmk31bH/hvf+6A8PDRJC D/c+1eyJfKypj/7a2ClKdvuPgOP+GHoP9oeuBD2TGf1PxkxssjRj7eNF19AnyOgy wP0+KP+G0eL3AzWtvxFD9/uMWr/FnxhJ2H4Cumy6Rm9MksHTYcTmtG6QkiH6GxKR iP7/pOkpGvIq49c2JUrU7F/YIw== -----END CERTIFICATE-----Generated at Mon Mar 2 03:55:42 2026 by rpki-client